Create the firewall hub virtual network

 First, create the resource group to contain the resources for this tutorial:

1. Sign in to the Azure portal at https://portal.azure.com.
2. On the Azure portal home page, select Resource groups > Add.
3. For Subscription, select your subscription.
4. For Resource group name, type FW-Hybrid-Test.
5. For Region, select (US) East US. All resources that you create later must be in the same location.
6. Select Review + Create.
7. Select Create.

Now, create the VNet:

 Note

The size of the AzureFirewallSubnet subnet is /26. For more information about the subnet size, see Azure Firewall FAQ.

1. From the Azure portal home page, select Create a resource.
2. Under Networking, select Virtual network.
3. Select Create.
4. For Resource group, select FW-Hybrid-Test.
5. For Name, type VNet-hub.
6. Select Next: IP Addresses.
7. For IPv4 Address space, delete the default address and type 10.5.0.0/16.
8. Under Subnet name, select Add subnet.
9. For Subnet name type AzureFirewallSubnet. The firewall will be in this subnet, and the subnet name must be AzureFirewallSubnet.
10. For Subnet address range, type 10.5.0.0/26.
11. Select Add.
12. Select Review + create.
13. Select Create.